jab-anstoetz-group-data-protection

DATA PROTECTION

Data protection is a matter of trust and your trust is important to us. The data processing of JAB JOSEF ANSTOETZ KG, represented by personally liable partners: Stephan Anstoetz, Heinz Anstoetz GmbH, Bielefeld, HRB 30095, Managing Directors of Heinz Anstoetz GmbH: Stephan Anstoetz, Claus Anstoetz, Chris-Jacob Schminnes (hereinafter also "we" or "us") as the responsible person within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) is of course based on the statutory provisions.

Your information
This data usage information informs visitors and customers who conclude contracts on our website about data collection, processing and use when visiting, registering and concluding a contract, as well as about objection, revocation and other rights to which you as the person affected by the data collection and use are entitled.

The following linked headings are intended to make it easier for you to access the information you require.

  • A. General notes
    • 1. Scope, terms
    • 2. Use without registration
  • B. Notes on data usage
    • I. Use of your personal data
      • 1. What are personal data
      • 2. Use of data for establishing contact, creating offers, ordering samples, registration
        • a) Contact
        • b) Preparation of offers
        • c) Sample order
        • d) Registration
        • e) Microsoft Bookings
      • 3. Social Media
        • a) Data protection declaration for Facebook
          • aa. Data usage by Facebook
          • bb. Cookies
          • cc. Our use of data
          • dd. Your rights and other information
        • b) Data protection declaration for Instagram
          • aa. Data processing by Instagram
          • bb. Data processed by us through Instagram
      • 4. Processing in the company organisation
        • a) Transmission to third parties
        • b) Outsourced IT and hosting
      • 5. Geolocation
      • 6. Use of data for advertising
      • 7. Use of data in your application
      • 8. Deletion and blocking
    • II. Data collection when you visit our website
      • 1. Technical information and cookies
        • a) Technical information
        • b) Cookies
      • 2. Analysis tools and advertising
    • III. How do we protect your personal data?
    • IV. What rights do I have?
      • 1. Right to confirmation and information
      • 2. Right to rectification
      • 3. Right to object
      • 4. Right of withdrawal
      • 5. Right to deletion (right to be forgotten)
        • a) Requirements for deletion
        • b) Further right to be forgotten
        • c) Exceptions to deletion
      • 6. Right to restriction of processing
      • 7. Right to data portability
      • 8. Asserting your rights

A. GENERAL NOTES

1. Scope, terms

1.1. The following information applies to the use of the JAB website, including the configurator through which goods can be configured as desired and offers from retailers can be requested.

1.2. Users within the meaning of this Agreement are visitors to our site who use the websites, the functions or the content offered, even if this is done without registration.

2. Use without registration

Every user can move around our site free of charge and without giving names or other identifying information, including information about JAB, the products and the retailers, and looking for them there. You can also subscribe to a JAB newsletter via the website.

B. NOTES ON DATA USAGE

 I. USE OF YOUR PERSONAL DATA

1. What are personal data

Personal data include all information that relates to an identified or identifiable natural person (hereinafter "Data Subject"). A name is not necessarily required for identifiability. Indirect identifiability is also sufficient, for example, by means of assignment to an identification number, to location data, to an online identifier or to one or more special features. So it is about your identity. This includes, for example, your name, but also your telephone number, your address and other data that you provide us.

A large number of legal bases for our data processing can are available in the European General Data Protection Regulation (GDPR) the text of which and the associated considerations are available, e.g. at https://dsgvo-gesetz.de. In the following information, we refer to the corresponding regulations as the respective legal basis for our processing.

2. Use of data for establishing contact, creating offers, ordering samples, registration

a) Contact

If you contact us via our contact options (e.g. via e-mail or the contact form), we will save your name and your contact details (if you provide us with them) as well as your request. The data are used to process your request and to communicate with you. We use your e-mail to reply to you by e-mail (legal basis Art. 6 Para. 1 Clause 1 lit. a and b of the GDPR). If you want us to do something for you personally, we need your real name. If you have any other questions, you can also provide a pseudonym.

You also have the option of requesting a callback from us or a specialist retailer. We need your telephone number for this. You can also voluntarily provide us with your first and last name. If you ask a specialist retailer to call you back, we will forward the data you provided to them. We or the specialist retailer use the data you provide to respond to your callback request.

Once your request has been finally settled and there are no other storage obligations or registration, the data will be deleted again.

b) Preparation of offers

Users can use the configurator to create offers. No personal data is required to create the offers. The offers can be downloaded by the user as a PDF. The offers are also made available to the retailer selected by the user.

As a registered user, you can save your configuration in the customer account.

c) Sample order

If you place a sample order with JAB (only possible as a registered user), your name as well as the address and selection data will be used to process the order. Your data will be transmitted to those service partners who are involved in processing an order or delivering the item (e.g. forwarder, logistics specialist). (Legal basis Art. 6 Para. 1 Clause 1 lit. b of the GDPR).

In addition, commercial and tax law obliges us to archive data from concluded transactions for the duration of the statutory retention periods. The legal basis for the corresponding data usage is Art. 6 Para. 1 lit. c of the GDPR.

d) Registration

You can register with JAB (e-mail address, address and password). Once you have registered, you will have access to a contact form, you can place sample orders and, if necessary, save and manage your configuration and favourites. Your collection is available anytime and anywhere - as long as you want and from any internet-enabled device.

If you want to close your account again, please use one of the contact options below. Please note that your data will continue to be stored by us even if it is closed and will be used for the specified purposes (such as, order processing, but also for advertising information).

e) Microsoft Booking

Our website uses the Microsoft Bookings appointment booking service of the provider Microsoft Ireland Operations Limited, Dublin (Ireland). This service allows users to make an appointment online (in person or online) with one of our consultants. Your entries, the address, the page from which you accessed the service, as well as the access time and the browser configuration (browser fingerprint) are transmitted to Microsoft for this. For more information, please refer to the Microsoft privacy statement. (https://privacy.microsoft.com/en-GB/privacystatement).

The connection to the Microsoft Bookings is only established if you provide us with your consent via our website. Please note that you are not obligated to use Microsoft Bookings in order to schedule an appointment. If you do not wish to use the service, please use a different contact option offered to make an appointment.

Your consent provides the legal basis for the transfer, storage and processing of data (Art. 6, para. 1, lit. a of the General Data Protection Regulation (GDPR).

You can revoke your consent to data processing at any time. In this case, the intended contact with the user is no longer possible or any communication that has already begun can no longer be continued.

 

3. Social Media

a) Facebook

aa. Data usage by Facebook

When you visit our Facebook page, you are fundamentally subject to the data protection provisions of facebook.com(operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; Board of Directors: Gareth Lambe, Shane Crehan; Registered in Ireland (Companies Registration Office ); Commercial register number 462932 - hereinafter: "Facebook"). Information on the content and purpose of the storage and processing of your data can be found in Facebook's data protection policies https://www.facebook.com/about/privacy/.

Every time you visit our Facebook page, especially if you trigger the programs that are automatically integrated into Facebook pages (such as, the “Like” button), you transmit information about yourself to Facebook. We would like to point out that, due to the data storage by Facebook, there is a risk that your personal data will also be transferred to the USA and stored and processed there, since the parent company, Facebook Inc., is based in the USA. Facebook is solely responsible for this type of data processing.

Facebook uses your data, including the fact that you have looked around our fan page, for market research and advertising purposes. This means that Facebook uses this data to create extensive profiles about you, which are then used to show you, for example, advertisements that are relevant to your interests in the context of your timeline.

A detailed description of the respective data processing by Facebook and the possibilities of objection (opt-out) can be found in the following documents from Facebook:
Data protection declaration: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and: http://www.youronlinechoices.com

bb. Cookies

Facebook uses cookies on its own responsibility. When you log in to Facebook, Facebook can read out data about you and your interaction with our site, which may be stored in cookies. Cookies are small files that are stored on your data carrier and that save certain settings and data for exchange with the Facebook system via your browser. The time for the duration of the storage can be set to a few years. Regardless of the duration set, you can also manually delete cookies in your browser or configure your browser so that cookies are automatically deleted as soon as you close the browser. Most browsers accept cookies by default. You can allow or prohibit cookies independently in the security settings.

The acceptance of cookies is generally not a prerequisite for visiting our online offer. If you deactivate cookies from Facebook, certain options offered by Facebook may not be available to you on our site and content may not be displayed or displayed incorrectly. Further information on Facebook cookies and possible settings can be found here https://www.facebook.com/policies/cookies/.

cc. Our use of data

The processing of the data on this Facebook page is based on an Agreement on joint processing of personal data with Facebook. Facebook and JAB JOSEF ANSTOETZ KG are therefore jointly responsible within the meaning of Art. 26 of the GDPR.

JAB JOSEF ANSTOETZ KG
Potsdamer Strasse 160
D-33719 Bielefeld

E-mail: datenschutz@jab.de

Tel. : +49 521 2093-0 Fax
: +49 521 2093-388

District court Bielefeld HRA 11481 VAT ID no. DE 126937328

Personally liable partners: Stephan Anstoetz, Heinz Anstoetz GmbH (AG Bielefeld, HRB 30095 - managing directors of Heinz Anstoetz GmbH: Stephan Anstoetz, Claus Anstoetz, Chris-Jacob Schminnes)

Entries on Facebook
We only use your personal data - like on Facebook, for example, intended for the activation of the social plugins - to appear on our Facebook page (legal basis Art. 6 Para. 1 lit b of the GDPR). If you click the "Like" button, the information "[Username] likes this" appears under one of our posts. So your username will be displayed. A preview image of your profile picture is also displayed.

Your comments, which you can enter using the "Comment" function, appear on our site, as provided on Facebook, with your username and the image of the profile picture you have set. This information is also visible to people who are not "friends" with you on Facebook. In addition, this information can also be activated for visitors to our site who are not logged into Facebook. Facebook is not a platform to transmit confidential information to us, especially not about your state of health or similar information. Entries and comments on our site should be treated like other public contributions.

Contact us
If you contact us via our electronic contact options, we will save your message. Other messages, such as those sent by e-mail or the postal service, are also stored. The personal data contained therein will be used to process your request and to communicate with you (legal basis Art. 6 Para. 1 lit. b of the GDPR). After your request has been finally processed, it will be deleted, unless other agreements have been made with you or there are statutory archiving obligations (e.g. due to commercial or tax law). Archived messages are deleted after the archiving deadlines have expired or after our interest in archiving them for legal defence purposes has ceased (usually after the statute of limitations for any claims). Please note that we have no influence on or knowledge of whether Facebook also actually deletes the messages when we remove them from our Facebook inbox.

Technical data collection on Facebook
Facebook also provides the operators of company pages, including us, with anonymised statistics.

It concerns anonymised data, such as
- page activities - page views - number of subscribers - "likes" - range - interactions, such as clicks on certain information, elements or links.

There is no reference to your person for us. We use the statistical data presented to us, based on the interest in improving the offer on our social media presences and websites and their design and maintenance of security as well as in cooperation with authorities in the event of violations (legal basis is Art. 6 Para. 1 lit. c and f of the GDPR).

Placement of advertising on Facebook
We place advertising on Facebook and use statistical data that we receive from Facebook to determine target group-specific delivery. There is no reference to your person for us. Facebook provides you with information about which settings you can make for advertisements on Facebook and other pages, insofar as these are controlled by Facebook (https://www.facebook.com/about/privacy/ there under "Control over Facebook ads").

Contests on Facebook
If we organise contests on Facebook, we only use the participant data received to conduct the contest and, if necessary, to notify you of the winnings. Personal data of winners will only be published in abbreviated form with first names, abbreviated surnames and place (example: "Bernd K. from Bonn"). You can also object to us using your data while participating in a contest. The data used before the objection was received remains unaffected. However, when your objection is received, your participation ends. There is no opportunity to win. We would like to point out that Facebook is not connected to the organisation of the contest and that the contest is in no way sponsored, supported or organised by Facebook. JAB JOSEF ANSTOETZ KG alone is responsible for the implementation and the lawful process. We also adhere to Facebook's specifications for data use in promotions. After that, personal chronicles and connections to friends may not be used to organise promotions.

dd. Your rights and other information

You have a right to object in the case of personal use of data for advertising purposes, in particular for direct mail. You also have the right to information about the personal data processed by us about you as well as to the correction, addition or deletion or restriction of processing. You also have the right to data portability if the rights and freedoms of third parties are not impaired. This applies to the data you provide to us, which we have processed on the basis of effective consent or to enter into or fulfil an effective contract. Your rights may be linked to the fulfilment of legal requirements and thus limited. If you have any questions about data protection, please contact us via [please provide e-mail address]. Among other things, you also have the right to lodge a complaint with the supervisory authority responsible for data protection, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement.

If you would like to exercise your right to information or other data subject rights with regard to data processing by Facebook, we advise you to assert this directly against Facebook. This is the most effective way of exercising your rights, as only Facebook has access to the data of its users and can therefore take appropriate measures and provide information.

You can find more information about your rights at https://www.jab.de/content/jab-anstoetz-group-data-protection, under section "IV. What rights do I have?".

b) Data protection declaration for Instagram

The account is operated responsibly by JAB JOSEF ANSTOETZ KG (hereinafter "we"). It operates as a general information medium, particularly on topics related to fabrics, curtains, wallpapers, sun protection, floor coverings, furniture, and objects. We use both the technical platform and the services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: Instagram) for the service offered on Instagram.

aa. Data processing by Instagram

The detailed data protection declaration of Instagram, in which you are informed about the data processing and the rights to which you are entitled vis-à-vis Instagram, can be found under the following link: https://help.instagram.com/519522125107875.
We have no influence on the type, scope and purpose of the data processing carried out by Instagram. We also have no influence on the use or disclosure of personal data by Instagram. There are also no effective control options here. When you use Instagram, your personal data is recorded, transferred, stored, disclosed and used by Instagram and is transferred to and stored in the United States of America (USA), Ireland and every other country in which Instagram does business used. You can find out which data is specifically affected by this in Instagram's data protection declaration.

bb. Data processed by us through Instagram

Processing takes place by us within the framework of the Instagram account when you react to our posts (e.g. by "liking" or "sharing" or responding to a post). In such a case, we will be informed by Instagram about the action taken, including the indication of the account name. We can use this data to prepare an answer. Personal data are also collected and processed if you send us a message directly via Instagram or an e-mail. We then also use this data to send you an answer. We process personal data beyond the Instagram account operated by us in the following cases. If you request in a message that we should contact you by other means outside of the Instagram account and provide us with relevant contact details (e.g. address, telephone number or e-mail address), we will transfer this data to our company systems so that we can contact you accordingly within the scope of our work. When sending a direct message, please note that Instagram may scan the content of the messages. Your personal data will be stored until the stated purposes have been achieved or as long as we have a legitimate interest in storing them. This is followed by deletion, unless other agreements have been made with you or there are statutory archiving obligations (e.g. due to commercial or tax law). When archiving is required by law, the data are blocked for other access. These documents are deleted and destroyed in accordance with data protection regulations after the statutory retention periods have expired.

4. Processing in the company organisation

a) Transmission to third parties

It is also used for legal defence and the pursuit of claims while safeguarding our legal interests (Art. 6 Para. 1 Clause 1 lit.f of the GDPR), within the framework of legal obligations (e.g. receipts for tax authorities) on the basis of Art. 6 Para.1 lit. c of the GDPR and in the context of our interests in a legally compliant and efficient implementation of the operational organisation (also through transfer to persons who are obliged to maintain professional secrecy, such as tax consultants or lawyers; Art. 6 Para. 1 Clause 1 lit.f of the GDPR) or by transfer to organisationally involved service providers whom we have contractually obliged to comply with data protection principles in accordance with Art. 28 of the GDPR.

Within the framework of our company organisation, JAB processes your data in IT systems operated by JAB and service providers and, if necessary, transmits data of customers, interested parties, suppliers and personnel in accordance with legal obligations to authorities, such as tax authorities and to consultants (tax consultants, lawyers, auditors) in accordance with JAB's interests in legally compliant and economic company management (legal basis Art. 6 para. 1 lit. c and f of the GDPR).

In this context, JAB analyses data on all corporate and business transactions for corporate management and market analysis. If there is no need for the specific purpose, the data is largely anonymised or at least evaluated pseudonymously and, if necessary, made available to third parties separately from persons. The legal basis is Art. 6 Para. 1 lit. c and f of the GDPR.

b) Outsourced IT and hosting

JAB uses individual IT software and hosting services from service providers as part of the provision of services and the fulfilment of your concerns and our contractual obligations on the basis of our interests in efficient and secure company and contract execution. Your data on your interests, concerns, orders and visits or perceptions of our range of services are also processed with the help of the services of these service providers. As far as required by law and not already secured by rules on professional secrecy, JAB has contractually secured the access and the secure and confidential treatment of your data in order processing cases. Legal basis Art. 6 Para. 1 lit.f of the GDPR, possibly in connection with Art. 28 of the GDPR (conclusion of an order processing contract).

5. Geolocation

For the purpose of geolocation of the user's device, i.e. to assign the location to a region or a city or an area within a city, JAB uses the IP address of the user or his entries for the location only within the scope of the consent given by the user upon request granted in the browser. The legal basis is Art. 6 (1) (a) of the GDPR.

If you give your consent, JAB uses the geolocation API of your web browser. JAB then receives estimated data on an approximate location, which is determined by the browser manufacturer by comparing your IP with IP databases and entries on radio access nodes in the vicinity in cooperation with the geolocation service, Google Location Services. The accuracy varies and is often not the same as where you run the browser. If you use a device with GPS support, as is often the case with smartphones, the GPS module can provide significantly more precise data when determining your location. If necessary, note the additional information provided by your browser manufacturer. If you do not agree, JAB will not receive or use such data. The data is used for the distance-dependent allocation of retailer offers to the user.

Instead of agreeing to geolocation using the geolocation API or GPS, you can alternatively carry out a search using a zip code or address data. Here too, we only collect and use your location data if you enter this data directly. It is only used for the purpose of determining a retailer in your area.

6. Use of data for advertising

a) General uses

JAB is interested in maintaining customer relationships with you, recruiting you for new product groups and services from us, generating new customers, reactivating old customers and providing our customers with information and offers. In order to safeguard these legitimate interests, JAB processes your data on the basis of Art. 6 (1) (f) of the GDPR (also with the help of service providers) in order to provide you with information and offers from JAB and to improve our information and offers. JAB may also provide for your separate consent to be obtained outside of this document and, in these cases, bases the use of data on Art. 6 (1) (a) of the GDPR.

Please refer to our further information on our data processing in this context in the advertising measures listed below and our information on the use of profiles under II. Item 2.

b) Use of data without consent

We use the following data based on the aforementioned legal basis, without asking you separately for your consent.

- Postal advertising

We use your first and last name, your postal address and - insofar as we have received this additional information from you - your title, academic degree, date of birth and your professional, industry or business name to send you offers and information about our company and our services and products by post if, after evaluating the data given under II. 2, we expect this information to be in your interest.

- E-mail advertising with our own similar offers

If we receive your e-mail address in connection with the sale of goods, we will use the e-mail address to advertise our own similar products. You can also object to any advertising use at any time without incurring any costs other than the transmission costs according to the basic tariffs. In the commercial sector, we use the telephone number for advertising purposes even with presumed consent.

As a service provider, we use the company Sendinblue GmbH, with whom we have also concluded contractual agreements on data protection (order processing contract).

Please refer to our further data usage for evaluation and optimisation in this context from the explanations on e-mail advertising with consent.

c) Consent-based advertising

We only make the following uses after we have asked for your consent outside of this declaration.

Art. 6 Para. 1 lit. a of the GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

(The acceptance of this information does not yet constitute your consent to the corresponding use of your data for advertising purposes!)

- E-mail advertising with separate consent

If you have registered separately for our newsletter, your e-mail address and any other personal data that you voluntarily provided to us during registration (e.g. your name for addressing us) will be used for your own advertising purposes and, if applicable, in the newsletter advertising partner offers contained therein are used (legal basis Art. 6 Para. 1 lit. a of the GDPR. We statistically evaluate when such an e-mail is called up and, if applicable, which information offers and with what intensity they pique interest (e.g. when a link is called up). The evaluation is carried out to improve the delivery times and to optimise the content of our offers and advertising information. We use the company Sendinblue GmbH, 10179 Berlin, Germany, as a service provider here, with whom we have also concluded a contractual agreement on data protection (order processing agreement).

- Contests

If you take part in our contests, we will use your data to carry out the contest and in particular to notify you of the winnings (legal basis Art. 6 Para. 1 lit. b of the GDPR). If you have given us separate consent to use a specific contact channel (e.g. telephone or e-mail), we will use your data within the scope of the consent (legal basis Art. 6 Para. 1 lit. a of the GDPR). The data of the participants will be deleted from our active systems after the competition has been carried out. They are only archived by us for legal defence purposes, at the latest until the statute of limitations for conceivable claims (usually three years). The legal basis is Art. 17 (3) (e) of the GDPR. Winners' data will be archived for the duration of legal storage obligations for commercial and tax reasons to prevent disadvantages for the winner (e.g. recall of products) (legal basis Art. 6 Para. 1 lit. c of the GDPR).

You can revoke your participation at any time and object to the use of the associated data for the contest. A revocation of the use of data for the advertising purposes associated with the contest until receipt of the notification of the prize will be treated as a withdrawal from participation in the contest. Please note the further information on withdrawing consent and objecting to the use of data for advertising purposes.

7. Use of data in your application

If you apply to us, we will use and transmit the data you provide for the purpose of assessing your application documents and, if necessary, for carrying out the further application process (legal basis Art. 88 of the GDPR in conjunction with Section 26 Para. 1 Clause 1 of the German Federal Data Protection Act). An automated addition of your data from other sources (e.g. from social networks, credit reports) does not take place. We store your data for the duration of the application process and for a maximum of six months from the notification of a binding decision on your application, unless an employment contract is concluded. Incidentally, longer storage takes place only with your express consent (legal basis Art. 6 Para. 1 lit. a of the GDPR), insofar as we have to meet a legal requirement (legal basis Art. 6 Para. 1 lit. c of the GDPR) or if there are justified reasons, e.g. if claims are raised against the non-consideration of your application (legal basis here too is Art. 6 Para. 1 Clause 1 lit b of the GDPR). After the time has elapsed, your data will be deleted or only stored in archiving systems without direct access, if required by law, for archiving purposes under commercial and tax law.

8. Deletion and blocking

Your personal data will be stored until the stated purposes have been achieved or as long as we have a legitimate interest in storing them. This is followed by deletion, unless other agreements have been made with you or there are statutory archiving obligations (e.g. due to commercial or tax law). When archiving is required by law, the data are blocked for other access. These documents are deleted and destroyed in accordance with data protection regulations after the statutory retention periods have expired.

If you have consented to the collection, processing and use of your data, we will store and use your data for an indefinite period until it is withdrawn or the purpose for which you have given your consent no longer applies. This is followed by archiving d. Consent and processing data until the statute of limitations (usually three years) for legal defence purposes (legal basis Art. 17 Para. 3 lit. e of the GDPR). If you no longer wish to receive advertising from us, we will use your name, address and, if applicable, your e-mail address for the purpose of blocking in corresponding lists with which we compare our advertising measures so that you no longer receive any further advertising. In this sense, deletion means that your data is blocked in our systems, especially for advertising and marketing activities (legal basis Art. 6 Para. 1 lit. f of the GDPR). If necessary, the data will continue to be processed for purposes other than advertising, for example, in the context of contract processing and, if applicable, warranty as well as commercial and tax documentation (legal basis Art. 6 Para. 1 lit b and c of the GDPR).

If you wish, despite the possible consequences in individual cases, that you can continue to receive advertising, a deletion instead of blocking, please let us know. At your request, we can block personal data in whole or in part. To do this, tell us to what extent and, if necessary, for how long the blocking should take place. As far as technically possible, you can completely or temporarily exclude the processing and use of your data for certain areas.

II. DATA COLLECTION WHEN YOU VISIT OUR WEBSITE

1. Technical information and cookies

a) Technical information

You can visit our site without entering any information about yourself. If you visit our website, even if this is done, for example, via a link in a newsletter or an advertisement, certain data will still be recorded and stored in log files. Even if the visit takes place via newsletter links or advertising links on the internet, only access data without direct personal reference are recorded, such as for instance:

  • the website from which we are visited
  • the page that is called or the name of a requested file
  • the name of your internet service provider
  • type and version of your browser,
  • time and date of access
  • the operating system used on which the browser is running
  • the name of your internet service provider
  • the internet address of the accessing party (IP address)
  • products and content in which the visitor is interested and the nature of the interest, such as duration, frequency, interaction with forms, navigation elements and links

It is not possible for us to draw conclusions about your person based on this data and we will not combine the above data with your personal data without your consent, unless the purpose is to pursue legal violations and attacks on our systems.

The IP address is made available by our hoster, but for data protection reasons it is overwritten after 7 (seven) days with an "x" and thus anonymised.

We have also tried to shorten the IP address accordingly to ensure that this makes it difficult or almost impossible for certain partners who collect this IP as part of their services to refer back to your person. If we include third-party content on our website (e.g. embedded films or other information), they will receive your IP address for this purpose alone; as otherwise, the content cannot be delivered to your browser.

b) Cookies

Cookies are small text files that are transferred to your computer's hard drive using your web browser or other programs. These are stored locally on your computer's hard drive and kept ready for subsequent retrieval. These text files contain a characteristic string of characters with which we can identify your browser the next time you visit our website.

When you visit our website, you can see a detailed list of the cookies we use. At this point, we also ask for your consent to the use of these cookies and the technologies behind them.

Via the link on this website www.jab.de/content/cookies, you can see at any time which cookies we are using and the consent you have given. You can also revoke your consent there by unchecking the box. As soon as you uncheck the box, the data processing via the corresponding cookies is terminated.

Please note that we have no access to your browser or your hard drive. As a result, the cookies remain stored on your computer even after the box has been unchecked - but they no longer have any function for our website.

In such a case, we recommend that you delete the cookies manually from your computer using the browser settings.

Here, you can change the cookie settings

Consent with ConsentManager

Our website uses the consent technology of ConsentManager to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter referred to as "ConsentManager").

When you enter our website, a connection is established to the ConsentManager servers in order to obtain your consent and other declarations regarding the use of cookies. ConsentManager then stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way is stored until you ask us to delete it, delete the ConsentManager provider cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected. ConsentManager is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which guarantees that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

2. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States. The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is assigned to the user's end device. It is not assigned to a user ID. We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the recorded data records and uses machine learning technologies for data analysis. Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there. The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Matomo

This website uses the open source web analysis service Matomo. With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which pages were accessed and from which region. We also record various log files (e.g. IP address, referrer, browser and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks). The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

IP anonymisation

We use IP anonymisation for the analysis with Matomo. This means that your IP address is shortened before it is analysed so that it can no longer be clearly assigned to you.

Hosting

We host Matomo exclusively on our own servers so that all analysis data is stored by us remain with us and are not passed on.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks. The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

3. Plugins and tools

YouTube with extended data protection

This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent attempts at fraud.If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. A GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of standardising the display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. A GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

III. HOW DO WE PROTECT YOUR PERSONAL DATA?

The law requires companies to create an adequate level of data protection. Among other things, the respective risk for the data, the probability of occurrence, the state of the art and the costs must be reconciled. We have taken appropriate technical and organisational measures to ensure the security of your data and its processing in accordance with legal requirements. If you have security concerns when entering data or have any other questions or suggestions, simply contact our customer service or our data protection officer. You will find further contact details at the end of these notes.

Your personal data are securely encrypted when you place an order and when you register for your personal account. We use the coding system SSL (Secure Socket Layer). We use technical and organisational measures to secure our website and other systems against loss, destruction, access, modification and dissemination of your data by unauthorised persons. You should always treat your access information confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.

IV. WHAT RIGHTS DO I HAVE?

As a person affected by data processing, you can assert certain legal rights.

1. Right to confirmation and information

According to Art. 15 of the GDPR, you have the right to request confirmation from us as to whether personal data relating to you are being processed. In the event that we process such data, you have the right to free information about your stored data. The information includes details about

  • the purposes of processing;
  • the categories of personal data that are processed;
  • the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organisations;
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  • the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing;
  • the right to lodge a complaint with a supervisory authority;
  • if the personal data are not collected from the data subject: all available information on the origin of the data;
  • the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) of the GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, the data subject has a right to information as to whether personal data have been transmitted to a third country or to an international organisation. If this is the case, the data subject also has the right to receive information about the appropriate guarantees in connection with the transmission. If you have any questions about the collection, processing or use of personal data, if you need information or if you want to assert your rights in any other way, simply contact us using the contact details listed at the end of these notes.

2. Right to rectification

You have a right to correction and/or completion vis-à-vis the person responsible if the processed personal data concerning you are incorrect or incomplete. The person responsible must make the correction immediately.

3. Right to object

Your right to object
You have the right to object at any time to the processing of personal data relating to you, which is based on a balancing of interests in accordance with Art. 6 (1) (f) of the GDPR, for reasons that arise from your particular situation; this also applies to profiling based on these provisions. In this case, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

You have the right to object to the processing of your personal data for direct marketing purposes at any time, with the result that the data will no longer be processed for these purposes.

 

4. Right of withdrawal

You have the right to revoke any consent you may have given at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

5. Right to deletion (right to be forgotten)

a) You have the right to request the deletion of your personal data. Please note that the right to immediate deletion (Art. 17 of the GDPR) ("right to be forgotten") only exists if one of the following reasons applies:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke your consent, on which the processing was based in accordance with Art. 6 (1) (a) of the GDPR or Art. 9 (2) (a) of the GDPR, and there is no other legal basis for the processing.
  • You object to the processing in accordance with Art. 21 Para. 1 of the GDPR and there are no overriding legitimate reasons for the processing, or you object in accordance with Art. 21 Para. 2 of the GDPR to processing for the purposes of direct advertising.
  • The personal data relating to your person have been processed unlawfully.
  • The deletion of personal data is necessary to fulfil a legal obligation under EU law or the law of the member states to which the person responsible is subject.
  • The personal data relating to you was collected in relation to information society services offered in accordance with Art. 8 Para. 1 of the GDPR.

b) Further right to be forgotten

If we have made the personal data relating to you public and we are obliged to delete it in accordance with Art. 17 Para. of the 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to who process the personal data, to inform them that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

c) Exceptions to deletion

In addition to the above requirements, please note that the following exceptions can justify a rejection of your request for deletion: The right to deletion does not exist if processing is necessary

  • to exercise the right to freedom of expression and information;
  • to fulfil a legal obligation that requires processing under the EU law or of the law of the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible;
  • for reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 of the GDPR;
  • For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 of the GDPR, insofar as the right to erasure is likely to make the realisation of the objectives of this processing impossible or seriously impair it, or
  • to assert, exercise or defend legal claims.

6. Right to restriction of processing

You have the right to restriction of processing if you dispute the accuracy of the personal data for a time period that enables us to check the accuracy of the personal data or if you refuse to delete it in the event of unlawful processing and instead restrict the use of personal data. You also have this right if we no longer need the data, you need this personal data to assert, exercise or defend legal claims. Finally, you can assert this right if you have objected to the processing in accordance with Art. 21 Para. 1 of the GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing has been restricted, this data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the EU or a member state. The possibility of permanent storage remains unaffected. If the processing restriction has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

7. Right to data portability

You also have the right to data portability of the data you have given us, which we have processed based on effective consent or whose processing was necessary for entering into or fulfilling an effective contract in a "structured, common and machine-readable format". You also have the right to request the direct transfer to another person responsible, insofar as this is technically feasible. The right only exists insofar as the rights and freedoms of other persons are not impaired.

8. Asserting your rights

If you have any questions or to assert your rights, please contact our customer service (e.g. at info@jab.de.)

You can also contact our Data Protection Officer, who is responsible in the event of a complaint. You can contact our Data Protection Officer using the following contact details:

E-mail: datenschutz@jab.de

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of the personal data concerning you violates the General Data Protection Regulation (GDPR).

JAB JOSEF ANSTOETZ KG
Potsdamer Straße 160
D-33719 Bielefeld

Postfach 10 04 51
D-33504 Bielefeld

Phone: +49 521 2093-0
Fax: +49 521 2093-388
E-Mail: jabexport@jab.de